313 matches found
LB-LINK BL-WR9000 命令注入漏洞
The LB-LINK BL-WR9000 is a wireless router produced by the LB-LINK company. Version 2.4.9 of the LB-LINK BL-WR9000 contains a command injection vulnerability. This vulnerability arises from operations on the function sub458754 in the file/goform/setwifi, which allows for command injection,...
CVE-2026-4227: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub44D844 of the file /goform/gethidessidcfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be...
LB-LINK BL-WR9000 安全漏洞
The LB-LINK BL-WR9000 is a wireless router produced by the LB-LINK company. Version 2.4.9 of the LB-LINK BL-WR9000 contains a security vulnerability. This vulnerability arises from an operation on the function sub44D844 within the file/goform/gethidessidcfg, resulting in a buffer overflow. This...
LB-LINK BL-WR9000 安全漏洞
The LB-LINK BL-WR9000 is a wireless router produced by the LB-LINK company. Version 2.4.9 of the LB-LINK BL-WR9000 contains a security vulnerability. This vulnerability stems from operations on the function sub44E8D0 within the file/goform/getvirtualcfg, which may lead to a stack buffer overflow...
CVE-2026-4226: Stack-based Buffer Overflow
A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affected element is the function sub44E8D0 of the file /goform/getvirtualcfg. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public...
CVE-2026-4228: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub458754 of the file /goform/setwifi. The manipulation results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...
PT-2026-25638
A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub 458754 of the file /goform/set wifi. The manipulation results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about...
PT-2026-25637
Name of the Vulnerable Software and Affected Versions LB-LINK BL-WR9000 version 2.4.9 Description A security issue has been identified in LB-LINK BL-WR9000 version 2.4.9. The issue resides in the sub 44D844 function within the /goform/get hidessid cfg file. Manipulation of this function leads to ...
The vulnerability of the HTTP Handler component of the /goform/set_blacklist file in the microprogramming-based routing software LB-LINK allows a attacker to execute arbitrary commands.
The vulnerability of the HTTP Handler component in the /goform/setblacklist file of the LB-LINK router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the HTTP Handler component of the /goform/set_hidessid_cfg file in the microprogramming-based routing software for LB-LINK allows a attacker to execute arbitrary commands.
The vulnerability of the HTTP Handler component in the /goform/sethidessidcfg file of the LB-LINK router microprogramming system is related to the lack of data cleaning at the management level when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute...
CVE-2025-1610
A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the function websGetVar of the file /goform/setblacklist. The manipulation of the argument mac/enable leads to os command injection. The attack may be launched remotely. The exploit has...
CVE-2025-1609
A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability is the function websGetVar of the file /goform/setcmd. The manipulation of the argument cmd leads to os command injection. The attack can be launched remotely. The exploit has...
The vulnerability of the web interface of the microprogramming software router LB-Link BL-CPE300M allows a attacker to carry out XSS attacks.
The vulnerability of the web interface of the microprogramming software-based router LB-Link BL-CPE300M is related to the lack of measures taken to protect the web page structure when processing the cmd parameter. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
The vulnerability of the `bs_GetManPwd` function in the `libblinkapi.so` library, located in the `/cgi-bin/lighttpd.cgi` file of the LB-LINK router software, allows a intruder to disclose protected information.
The vulnerability of the bsGetManPwd function in the libblinkapi.so library, located in the /cgi-bin/lighttpd.cgi file of the LB-LINK router software, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...
CVE-2023-54000
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externellb and reset are executed together When externellb and reset are executed together, a deadlock may occur: 3147.217009 INFO: task kworker/u321:0:7 blocked for more than 120 seconds...
UBUNTU-CVE-2023-54000
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externellb and reset are executed together When externellb and reset are executed together, a deadlock may occur: 3147.217009 INFO: task kworker/u321:0:7 blocked for more than 120 seconds...
Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
Malware campaigns distributing the RondoDox botnet have expanded their targeting focus to exploit more than 50 vulnerabilities across over 30 vendors. The activity, described as akin to an "exploit shotgun" approach, has singled out a wide range of internet-exposed infrastructure, including...
EUVD-2025-26132
Malicious code in bioql PyPI...